DIRECT BROADCAST SATELLITE 


SYSTEM 


MODEL DISASTER RECOVERY PLAN 


& 


INCIDENT RESPONSE MANUAL 


Developed by the Toolkit Working Group for the 
Media Security and Reliability Council 


November 30, 2005 


Document Status 


Table 1: Document status 


Document Control 
Number: 


Responsible Author: 


Table 2: Key to document status codes 


Work in An incomplete document, designed to guide discussion 
Progress and generate feedback which may include several 
alternative requirements for consideration. 


A document in a format considered largely complete, but 
lacking review by all essential personnel. Drafts are 
susceptible to substantial change during the review 
process. 


A stable document, which has undergone rigorous 
review and is suitable for implementation and testing. 


Closed A static document, reviewed, tested, validated, and 
closed to further change requests. 


Table 3: Master distribution list 


Name Title Contact Date Issued 


Office: 
Home: 


Cell: 


Office: 
Home: 


Cell: 


Office: 
Home: 


Cell: 


Office: 
Home: 


Cell: 


Office: 
Home: 


Cell: 


Office: 
Home: 


Cell: 


Table of Contents 


Döcüment- AUS е н ео ав ds ii 
[ПШОЧ@нСйОП an 1 
OBIS CHIVES EEE tS бл м aah эе з баны э канкы э к А, 1 
Definition of TermS ¿[LALA RAR TARA AA 3 
Document ріод ATA A AA AAA AR 5 
POCO AUTO Ss ios 5 
ОКРУМатепайсе ¿ii A 6 
Scheduled MAINIGN ANCE 0 O A A A a 6 
Unscheduled Маїтїепапсе............. нынын. 7 
[ЭКЕР Test чечкин ЧУН. Leo 8 
Responsibility for Establishing Testing ©сепагіозѕ................................ 8 
Scope and Type of Plan Те$їїпд............ ннн ннн ны. 9 
Structured walkthrough. nas cic AAA A A Ais AAA 9 

Site specific ехегсї$е. ааа ОАА 10 
Schedule of Plan Testing заа иннии уН И НУ НИНЕ 10 
Plan Testing Announcements ......................................«.......... 10 
POSE DONA ваа вигадала азада оаа та ee 11 
Evaluation of Plan Теѕіпд................................... а 12 
Plane Testing ISO tds 13 
A A OS 13 
Vulnerability Assessment Guidelines ................................................. 13 
Emergency Procedures ......cccccccccconocenocenecenonenerencnrn 17 
Job- Responsibilities vi О О О О О О С ОН 17 
Incident response іеат............................................. 17 
Manda cent 18 

A A A ЕЯ 19 


Personnel Authorized to Declare an Етегдепсу................................ 20 


Imita Assessment nissa AAA 20 
Incident Command Сепїе!........... а 21 
Evacualion Procedures... iia avs 22 
Guüidelne УУ О ОУУ О ОУУ О ООУ ОУ О 22 
AAA e Мыны ыыы ылыы Нл Нн 24 
Incident response іеат:............................................. 24 
EMPIOY OO! occ cine enh О ОО К ne A 25 
Corporala ze лалы кыылын ыан Ыы R Teer et 25 
Media anna 26 
Suppliers and vendors: asii A ннн 26 
Medical апа TS A анны. 27 
Generatora eoero ОЛ Л О Г ОЛО О Л ЛЛУ О ООО 27 
Facility таїпїепапсе:............. ыыы 28 
A A RN 28 
Соттипїсайоп$ IA A AA 28 
ÓN 29 
SA 30 
RECOVOIY Strategies... EE E 31 
A 34 
References Cited in This оситепі................................................... 34 
Suggested Reading and Other Кеѕоигсез......................................... 34 
Appendix A: Incident Response Мапоа!.................................................. 36 
Appendix В: DBS System Vulnerability Assessment Checklist................ 39 
Appendix С: Incident Command Center Inventory Template................... 42 
Appendix D: Emergency Evacuation Plan Template ............................... 44 
Appendix E: Survey Form Template .................ccccccssessseeeeeeeeeeeeeeeessseeeeress 53 


List of Figures 


Figure 1: Basic recovery planning ѕїерѕ.................................................... 1 
List of Tables 
Table 1: роситепрвгаше оиа ii 
Table 2: Key to document status содезѕ...................................................... ii 
Table 3: Master distribution |і5Ё....................................... н: ili 
Table 4: DRP Testi ааа ааа а 13 
Table 5: Incident command center location ............................................. 22 
Table 6: Incident response team ................................................«.....««... 24 
Table 7: Employee contact information ................................................... 25 
Table 8: Corporate contact information ................................................... 25 
Table 9: Media contact informatiON.........ccooooonnnnnccccccccccnnnnnnnnncnnnnnnnnnnnnnnnns 26 
Table 10: Suppliers апа уепаогѕ.......................................................... 26 
Table 11: Medical and emergency Contacts ............................................ 27 


vi 


Introduction 


Disaster recovery planning is a practical approach to contingency 
and risk management designed to reduce the consequence of an 
extended disruption of essential services. The scope of this document is to 
provide guidelines to develop a short term Disaster Recovery Plan (DRP) 
and Incident Response Manual (IRM) (Appendix A) for use as a tool by 
your organization for the timely resumption of essential services in 
emergency situations. Long-term Disaster Recovery plans, and business 
recovery issues, while important, are beyond the scope of this document. 
This document is generic in nature, and is designed to serve as a 
template. [Satellite Broadcaster] is encouraged to adapt its use to 
accommodate any unique requirements which may exist. 


As you formulate your disaster recovery plans you should ask 
yourself what you would do in the event your facility and all of the 
day-to-day operational resources you use were no longer available. 


Objectives 


Figure 1 shows the basic disaster recovery planning steps that 
should be followed in order to ensure that the timely recovery of essential 
services initiated in the event of an emergency situation. 


Prepare 
Assess Develop recovery and 
Identify essential services restoration procedures to 
required in an emergency ensure essential services 
continue in an emergency 
Recover Respond 
Recover essential services When an incident 
Evaluate recovery processes or testing occurs — use 
Revise procedures recovery procedures to 


respond 


Figure 1: Basic recovery planning steps 


The objective of this document is to provide guidelines and 
strategies that will allow [Satellite Broadcaster] to effectively accomplish 
these steps by assessing the vulnerability and impact to critical systems, 
and to recover operations and essential services in the event of a 
disruption caused by a natural or man-made disaster or other emergency 
situations in an organized and efficient manner. To meet these objectives 
the DRP should address the following major topics: 


Vulnerability assessment and prevention. 
Plan distribution and maintenance. 

Staff roles and responsibilities. 

Essential equipment, materials and services. 
Internal and external communications. 
Recovery strategies and procedures. 
Periodic Plan testing. 


In the event of an incident, it is essential to ensure that proper 
levels of notification and communication regarding the event are 
disseminated to personnel, emergency services and other stakeholders. 


It should be recognized that any plan should be flexible 
enough to be adapted to the particular emergency situation. The key 
to recovering from an emergency situation, with minimum impact, is 
to have a DRP and to follow it. 


Requirements 


When developing the DRP guidelines, the following requirements 
should be met: 


e All processes critical to the continuation of essential services 
should be identified. 

Critical personnel should be identified and receive the plan. 

The plan should be reviewed no less than annually. 

The plan should be tested. 

Availability of emergency information to the deaf and hard of 
hearing. 


Many people have come to depend on the delivery of multiple 
streams of information broadcast over the air, internet, or other means. 
Planning and recovery should take into account how these services will be 
backed up, restored and coordinated. 


Definition of Terms 


The following terms and abbreviations are used throughout this 
document. 


Disaster — For purposes of this document, a disaster is an event that 
creates an inability for an organization to provide essential services. 
Disasters are typically classified into three basic types: 


e Natural — wind, rainstorms, hurricanes, tornadoes, cyclones, 
volcanic eruption, earthquake etc. 


e Man-made - fire, explosions, release of toxic fumes, vandalism, 
sabotage, burst pipes, building collapse, bomb threats, 
equipment failure, airplane crash, etc. 


e Civil disorder — resistance to authority such as riots, terrorist 
activities, etc. 


Disaster Recovery Plan — The approved written plan used to develop 
processes and prepare the resources, actions, tasks, and data required to 
facilitate recovery from any disaster or emergency. 


Disaster Recovery Planning Manager – The individual or individuals 
assigned to oversee the creation, implementation, testing, periodic review 
and distribution of the DRP. 


Emergency Evacuation Coordinator — The individual or individuals 
assigned to oversee the creation, implementation, testing, periodic review 
and distribution of the EEP. 


Emergency Evacuation Plan — A written plan that communicates the 
policies and procedures for personnel to follow in the event an emergency 
situation requires vacating a facility. 


Emergency Evacuation Team — A group of individuals that develops and 
executes the policies and procedures for vacating a facility as required in 
the event of an emergency situation. The group consists of the Emergency 
Evacuation Coordinator, Safety Monitors, Disaster Recovery Planning 
Manager, Incident Response Team, and representation from other 
departments. 


Incident Command Center — The central gathering location for the 
Incident Response Team to facilitate the emergency communication 
process by enabling quick and clear exchanges of information for decision 
making. 


Incident Response Manual – A task oriented document for the use in the 
timely resumption of an organization's essential services in emergency 
situations. 


Incident Response Team — Personnel identified in advance as part of 
disaster planning. They are selected based on their skills and knowledge 
of the various operations within the organizations. This team has the 
responsibility to ascertain the level of response needed during and an 
emergency, and coordinate the recovery process. 


Master Distribution List — A record of personnel who receive a copy of 
the DRP. 


Recovery — Recovery pertains to the immediate reinstatement of an 


organization’s essential services after a natural or man-made disaster or 
other emergency situation. 


Safety Monitor — Тһе individual or individuals whose primary 
responsibility is to check assigned areas to ensure occupants have 
vacated a facility in the event of an evacuation. 


DRP - Disaster Recovery Plan 
EPP — Emergency Evacuation Plan 
ICC — Incident Command Center 


IRM – Incident Response Manual 


Document Distribution 


This section describes the procedures for distributing the DRP. 
Procedures 


The Disaster Recovery Planning Manager is responsible for the 
distribution of the DRP, as well as any additional emergency procedures 
as applicable. The DRP document should be distributed to the Incident 
Response Team (see Table 6) and others listed on the Master Distribution 
List (see Table 3). Copies should also be kept in the following locations: 


Master Нага Copy – The original printed version of the ОКР that is used to 
generate subsequent copies. A hard copy of the DRP should be located in 
the local Disaster Recovery Planning Manager's office. 


Master Soft Copy — The original electronic version of the DRP that is used 
to generate subsequent copies. An electronic copy of the DRP should be 
stored on a storage device that is routinely backed up. 


e Distribution Copy #2 — A copy of the DRP should be kept at 
each facility if separate facilities are used. 


e Distribution Copy #3 — A copy of the DRP should be kept at the 
Customer Support and Network Operations Center (МОС). 


e Distribution Copy #4 — A copy of the DRP should be kept at a 
secure off-site location. 


e Distribution Copy #5 — When applicable, a copy of the DRP 
should reside at a Division or Corporate office. 


e Distribution Copy #6 — Two copies of the DRP should reside at 
the Incident Command Center (ICC) (see Table 5). 


The DRP contains proprietary company information and is not 
for general distribution. Each individual possessing a copy is 
responsible for maintaining it in a secure location, and in accordance 
with company policies for the protection of proprietary information. 
The Disaster Recovery Planning Manager is responsible for 
maintaining the DRP in an updated condition and distributing the 
revised document whenever the DRP is updated. 


DRP Maintenance 


This section describes the procedures for maintaining the DRP. 
Maintenance procedures consist of two general categories: scheduled and 
unscheduled. Scheduled maintenance is time-driven, where unscheduled 
maintenance is event-driven. 


Scheduled Maintenance 


Scheduled maintenance consists of a scheduled annual review and 
updates as well as an annual structured walkthrough and tactical 
exercises. 


Scheduled maintenance occurs as the result of a scheduled review 
of the plans. Reviews are predictable and are scheduled not less than 
annually. The purpose of the review is to determine whether changes are 
required to strategies, tasks, notifications and assembly procedures. 


The Disaster Recovery Planning Manager is responsible for 
initiating Scheduled Maintenance activities. The Disaster Recovery 
Planning Manager should initiate reviews twice yearly. The Incident 
Response Team and their alternates should review the strategies and 
procedures for changes that may be required. The reviews should address 
events that have occurred within each team members’ area of 
responsibility that may affect prevention, response and recovery 
capability. 


The Disaster Recovery Planning Manager is responsible for any 
required updates to the DRP which results from the review. 


The Disaster Recovery Planning Manager should import all changes to the 
master hard copy, print hard copies of the plan, redistribute the copies as 
described above, and ensure that all issued copies are updated to the 
same level as the master hard copy. 


Ongoing consideration should be given to how the DRP will be 
maintained and stored in a secure and reliable manner. The DRP 
should be available to key personnel under all circumstances. 


Unscheduled Maintenance 


Certain maintenance requirements are unpredictable and cannot be 
scheduled. The majority of these unscheduled plan changes occur as the 
result of major changes to hardware, software, network configurations, 
personnel changes, etc. The following are examples of items that may 
trigger the need for unscheduled maintenance: 


e Significant modifications in the physical plant (і.е., changes іп 
equipment, Audio/Video(AV) processing chains, network 
operating software, changes to Local Receive Facility (LRF) 
routing services, etc.). 


e Changes in on-site and off-site storage facilities (i.e. Parts and 
equipment storage lockers, sheds, closets.... think about both 
physical and data storage). 


e Changes in major operations facilities (i.e., On-Air Production 
Studio, News Room, Broadcast Equipment Room, Customer 
Support Centers, Network Engineering Facilities, Uplink 
Facilities). 


e Significant modification of business or operational support 
systems (i.e. traffic and billing systems, AV scheduling systems, 
automation systems or anything that integrates with and affects 
day to day technical operations). 


e Personnel transfers, terminations, promotions, relocation (i.e., 
home telephone and/or cell telephone number changes) or 
resignations of individuals from the Incident Response Team. 


e Recent acquisition of or merger with another company. 


The Disaster Recovery Planning Manager should be made aware 
of all potential changes to the plans resulting from unscheduled 
maintenance. The Disaster Recovery Planning Manager should meet with 
the personnel submitting the change and update the DRP as necessary. 


DRP Testing 


This section describes the procedures for periodically testing the 
DRP. 


Responsibility for Establishing Testing Scenarios 


The Disaster Recovery Planning Manager should meet with all 
department heads named in the Master Distribution list to develop testing 
for each department. For example, the Disaster Recovery Planning 
Manager and the appropriate Technical, Operations and Customer 
Support Managers should meet to identify all critical components of the 
satellite broadcast chain and compose testing scenarios for each. At first, 
a block diagram of all major subsystems can be developed, then as the 
plan matures; smaller subsystems can be included in the testing 
scenarios. Generally satellite uplink centers have superior failover and 
backup systems in place due to the concentration of financial assets and 
the critical path of the facility in the satellite broadcast chain. However it is 
just as important to consider customer service centers, network 
engineering centers as well as product installation centers. It is not just 
the core broadcast chain that is important in maintaining company 
operations in a disaster. A test for loss of a major customer service facility 
may involve switching to an alternate site, or may involve setting up 
temporary facilities to provide customer service capabilities. 


The input of all affected parties, such as customer support 
technicians, installation technicians, as well as non-technical personnel 
should be requested so that routine tasks essential to the normal 
operations of the satellite broadcaster are not overlooked. 


While conducting DRP testing, it is essential to carefully document 
events as they occur during the test, noting any unexpected, unusual or 
abnormal system operation. Be aware of the amount of time and stress 
factors involved in carrying out DRP testing scenarios. It is recommended 
that a staff member be assigned the task of keeping a log during the test. 


This will be of assistance during the review of the test to refine and 
improve performance in subsequent testing. 


Scope and Type of Plan Testing 


Conducting periodic tests of the DRP is mandatory to ensure that 
plans meet the recovery needs defined by the organization. These tests 
should be structured so as to be realistic without disrupting the normal 
business process. Testing should be planned, organized and conducted in 
such a way that results can be documented, verified, and evaluated. 


Disasters can happen in many ways, some unimaginable and 
unforeseeable. Developing a testing scenario for each and every disaster 
may not be possible. The Disaster Recovery Planning Manger should 
make every effort to identify all types of disasters likely to occur in their 
locality and then imagine other disasters which may occur, though only 
rarely. All disaster testing scenarios should be based on worst case 
conditions. 


During the testing of the DRP it may not be possible to duplicate 
the actual conditions of a disaster. For example, while conducting a test of 
the DRP for a complete evacuation of a facility such as a bomb threat, the 
actual physical evacuation of personnel and customers may not be 
practical because of the business disruption that will result from the test. 


For some testing, a simulation can be used. For example, if the 
test for that day is a complete building evacuation; non critical 
personnel can assemble at their assigned meeting point, or, if the 
facility is in a high rise building, a simulated assembly area might be 
the elevator lobby on the tested floor. The testing team would then 
interview the staff to make certain they know what procedures to 
follow in the event of an actual building evacuation. 


Structured walkthrough. 


A structured walkthrough is the first step in developing a testing 
strategy and may consist of gathering department heads and touring the 
facility to identify critical areas of concern. Each department head can 
identify the critical systems in their area of responsibility while noting 
comments from others about inter-operability issues. A priority list of 
testing of all major systems and subsystems can then be developed. 


Site specific exercise. 


Some locations may require site specific exercises. The plans and 
testing for the main facilities may not work for other locations. Testing and 
planning need to be customized for all locations. 


Schedule of Plan Testing 


It is required that a schedule be developed for testing of each 
critical system and subsystem. For example, the “loss of customer service 
center” test might be scheduled during non-peak hours to avoid 
interruption of service. Critical systems should be tested more often than 
ancillary subsystems. The Disaster Recovery Planning Manager may 
require “loss of an uplink service” testing every three months, while “loss 
of a satellite” simulation testing may be performed only once or twice per 
year. The DRP in its entirety must be tested no less than annually. 


Some testing, for example, emergency generator power systems, 
should be done regularly and tested annually with all power fully 
disconnected from the utility power grid. This will verify that all critical 
systems are connected to the correct emergency backup power supply. 


A local station that was testing its UPS and emergency power 
monthly, fully expected to pass their annual test with all the power 
fully disconnected from the utility power grid. All systems ran 
correctly as expected except that the main newsroom had no lights. 
The newsroom was completely dark. During a recent electrical 
renovation the newsroom lighting was connected to the wrong 
power source. This situation would not have been found without this 
type of test. 


Plan Testing Announcements 


Announcements of major system and subsystem testing should be 
given far enough in advance to allow for proper steps to be taken in 
preparation for the test. For example, if the automation system is to be 
tested, engineering personnel should make sure that all data systems are 
fully backed up and redundant. Steps should be taken in case the tested 
system fails the scheduled test to make sure that there are no unplanned 
interruptions to the stations on air program material (dead air). In the event 
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of a main channel encoder system test, steps must be taken in 
preparation for the backup channel encoder to be on standby in case 
unforeseen events prevent the main channel encoder from returning to or 
remaining in service. 


In general, a 7 to 10 day advance notice of DRP plan testing should 
be sufficient, but it is important to examine all operations to insure 
adequate notice is given. 


After the DRP is developed, consideration should be given to 
preparing an annual schedule of systems and subsystems testing. This 
will assist engineering and operations personnel in planning maintenance 
tasks and upgrades to either coincide with or avoid DRP testing 
parameters. 


In the event of an actual disaster, it is critical that a complete 
event log be kept to allow for a later review of recovery efforts and 
any changes that may improve those procedures. 


Test Scenarios 


In this section, all critical systems and subsystems are identified 
and categorized by order of priority for creating a DRP testing strategy. 
Each industry has its own particular vulnerabilities. As vulnerabilities are 
identified, a corresponding testing plan needs to be developed. Here are 
some examples: 


e Disaster - Loss of uplink service or facility, Recovery — Backup 
uplink site. 

e Disaster — Loss of Customer Service Center, Recovery — move 
operations to a backup facility or a temporary facility. 

e Disaster — Evacuation of building, Recovery — move operations 
to remote location. 


When composing the test scenario, consideration should be given 
to the complexity of the test, how much time it will take to perform the test, 
how much time it will take to properly de-brief and evaluate the test, and 
the general impact of the test on normal day to day operations of the 
facility. Also, if the test includes change out of equipment and/or changes 
to normal signal path routing, care should taken to restore the tested 
system to pre-test configuration. 
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It is recommended that careful system configuration notes and photos be 
taken before the test is conducted to ensure that the system can be 
restored to normal operations. 


Evaluation of Plan Testing 


As each segment of the DRP is tested, an evaluation should be 
conducted to identify problem areas in both the testing scenario and the 
recovery strategy. The following question will help to serve as a guide for 
evaluating the efficacy of the conducted tests: 


Did the testing run smoothly? 

Did the test run through all the steps to conclusion? 

Is the test practical? 

Does the test show that the planned recovery strategy is 

functional? 

e Does the test interfere with other systems or departments not 
included in the test? 

e Does the test interfere with subscriber’s’ enjoyment of regularly 
scheduled programming? 

e At the conclusion of the test, was a return to normal operations 

easily accomplished? 


After completion of the test, a series of meetings should be held 
with the affected departments, as well as the Incident Response Team 
and Emergency Evacuation Team in order to compile observations, 
comments, and criticisms and give each participant a chance to 
recommend if necessary, changes to the plan. The Disaster Recovery 
Planning Manager should then update the plan and redistribute the 
revised plan. 


It may be necessary to re-test the same segment of the plan 
multiple times before a testing protocol is agreed upon by all concerned 
departments. Proper planning, testing and implementation of recovery 
strategies will facilitate a fast and complete return to “normal!” operations 
during an emergency. 


Remember, it is much easier to solve problems in the light of 
day than in the fog of war. 
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Proper planning, testing and implementation of recovery strategies 
will facilitate a fast and complete return to “normal” operations during an 
emergency. Subscribers will remember that it was your system that stayed 
on the air and relayed important news and critical emergency information 
during the crisis. 


Plan Testing History 


DRP testing should be carefully documented to provide a complete 
record of events as the plan is maintained and updated. The plan testing 
history will then provide an accurate record of test results, evaluations and 
updates as well as a record of when each test segment of the plan was 
carried out. The Disaster Recovery Planning Manager can use the test 
history as a tool to determine what changes may have occurred if a test 
suddenly no longer works. A log for documenting the test results is 
provided in Table 4. 


Table 4: DRP test history 


Date Tester Test Type Test Results 


Prevention 


Vulnerability Assessment Guidelines 


To facilitate the assessment of vulnerabilities which potentially may 
exist in [Satellite Broadcaster], a model Satellite Broadcast Vulnerability 
Assessment Checklist developed by the Media Security and Reliability 
Council is provided in Appendix B (Media Security and Reliability Council, 
2005). The Media Security and Reliability Council (MSRC) is a Federal 
Advisory Committee, formed by the Federal Communications 
Commission, to study, develop and report on communications and 
coordination designed to assure the optimal reliability, robustness and 
security of the broadcast and multi-channel video programming 
distribution industries in emergency situations. 
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The checklist is not intended to be comprehensive, and [Satellite 
Broadcaster] is encouraged to adapt its use to accommodate any unique 
requirements which may exist. The Vulnerability Assessment Checklist 
should be reviewed and updated as necessary but no less frequently than 
annually. The following guidelines are also provided as a tool to help 
facilitate the assessment of vulnerabilities which potentially may exist. 
[Satellite Broadcaster] is encouraged to review and follow these 
guidelines: 


Redundancies that are planned to provide adequate protection 
against equipment failure and even natural disasters are not 
necessarily the same as those needed to protect against a 
deliberate attack. Specifically, protection against deliberate 
attack requires security measures at facilities and a combination 
of both redundancy and geographic diversity for critical 
equipment and facilities. 


While keeping all video and data services on the air is most 
desirable, ensuring that the video services remain on the air to 
serve the community is an absolute necessity. The focus of 
prevention considerations should be on facilities that have a role 
in originating or delivering news and/or emergency warnings 
and notices to the public. 


Some capability should exist to obtain news and information in 
an emergency situation such as mobile communication links to 
backup facilities for local and national broadcasts or an 
arrangement to receive signals from alternate local television 
and radio stations near the disaster area. 


Backup communications capabilities should exist for relaying 
breaking news and information. The use of DBS receivers is 
encouraged to provide news and information during regional 
widespread emergencies which may affect other local and 
regional broadcasters. 
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In March of 2000, a small brush fire caused the Four Corners 
Generating Station to trip off line resulting in a power outage 
affecting almost the entire state of New Mexico. While | was on my 
way to the main studio to start the main generator (fueled by natural 
gas and connected to the natural gas main for a virtually unlimited 
fuel supply in preparation for Y2K), | tuned across the radio dial and 
was met with an eerie silence as every broadcast station within 
receiver range was off the air. This included FM, AM and Television 
stations originating in Albuquerque 130 miles distant! The KTAO 
radio station transmitter is entirely solar powered and within 15 
minutes after the outage began, KTAO was back on the air at full 
power and for about an hour was the only station in North Central 
New Mexico that was fully operational. This power outage affected a 
very large area and was caused by a relatively small brush fire under 
a power line. 


e When completing the Vulnerability Assessment Checklist it is 
prudent to consider the location and geographic distribution of 
key facilities, such as studios, customer service sites, uplink 
sites and support engineering locations. 


e Appropriate measures should be taken to provide redundant, 
geographically diverse methods and equipment for delivering 
program material to the uplink centers. 


e Collaboration with other satellite broadcasters should take place 
to increase collective site and equipment diversity, redundancy 
and interconnections. In times of emergency, “share the wealth” 
to ensure that all segments of the community are well served. 


e Appropriate measures should be taken to “harden” the uplink 
facility sites, particularly in areas prone to severe weather or 
natural disasters. 


e Appropriate measures should be taken to provide backup power 


capabilities for all key facilities, including main studios, content 
origination sites, uplink and customer support sites. 
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Essential equipment and service suppliers should be examined 
carefully to ensure that critical resources will have sufficient 
capacity to meet needs during an emergency. 


Physical security such as chain link fences augmented by 
security personnel and/or video surveillance is recommended at 
all sites critical to the broadcast operation. 


Satellite broadcasters should employ diverse power grid 
sources wherever feasible. 


Satellite broadcasters should take appropriate measures to 
provide backup power capabilities for their key facilities, 
including studios/newsrooms, satellite communications and 
uplink centers. 


Satellite broadcasters with Local Receive Facilities (LRF) should 
ensure that they have robust and redundant ways to 
communicate local content to their uplink centers. 


Satellite broadcasters should have backup signal feeds to their 
primary satellite transmit and receive sites. 


Satellite broadcasters with original programming should plan to 
have emergency origination capability at a separate location 
from their primary studio (e.g., backup studio, remote van, 
another station, etc). 


Satellite broadcasters with local news origination should have a 
remote vehicle, or some means of delivering live news and 
information from a remote site. 


Satellite broadcasters should have a backup satellite transmitter 
and receiver, or an alternate means (e.g., a Satellite Radio 
receiver, a dedicated phone line or a streaming audio Internet 
connection) to send and receive signals from and to national 
news services in emergency situations. 
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With the cooperation of federal and local policy makers, all 
broadcasters in a market should collaborate to increase their 
collective site diversity and redundancy, including news studios; 
operations; satellite transmit/receive facilities and transmitter/ 
antenna sites. 


[Satellite Broadcaster] should coordinate with federal and local 
authorities to ensure that technical and operations personnel 
can gain access to essential facilities equipment during times of 
emergencies. 


Emergency Procedures 


This section discusses the basic steps that should be followed in 
order to ensure that the timely recovery of essential services is initiated in 
the event of an emergency situation. 


Job Responsibilities 


Incident response team. 


Help to ensure the health and safety of all personnel. 
Coordinate and assist in all response and recovery efforts. 


Ensure all disaster recovery methods and procedures conform 
to [Satellite Broadcaster] policies. 


Ensure that the DRP is periodically reviewed and updated. 
Ensure that the DRP is periodically tested and rehearsed. 
Ensure that local and regional management is contacted 
concerning the emergency, and is provided periodic updated on 


recovery efforts. 


Assist management in communications with [Satellite 
Broadcaster] personnel. 
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Coordinate communications with essential equipment and 
service suppliers, including contract engineers, utility providers, 
fuel providers (diesel, propane, gasoline, etc.) and external 
telecommunications and internet providers, to ensure the 
availability of critical resources. 


Facilitate meetings required during and following an emergency. 
Distribute meeting agendas, minutes, status and action items to 
team members and key personnel. Report all information/status 
to management. 


Ensure that necessary repair and reconstruction materials can 
be obtained if there is an anticipated shortage in-house. 


Ensure that alternative methods to communicate with key field 
personnel in the event that radio, cell systems or other primary 
methods are inoperable. 


Management. 


Ensure the health and safety of all personnel. 


Ensure that the [Satellite Broadcaster] DRP is implemented as 
specified. 


Assist in response and recovery efforts. 


Ensure that sufficient cash reserves are available in the event 
that banks and ATMs are inaccessible. 


Ensure that adequate alternate facility(s) are available in the 
event that the emergency situation dictates that primary 
facility(s) should be evacuated. 


Ensure that adequate food, water and housing is available to 
personnel. 


Ensure that primary and alternate facilities are secure. 


Ensure adequate and secure long-term parking for personnel. 
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e Coordinate communications with [Satellite Broadcaster] 
personnel, local government officials and media. 


e Ensure that the necessary resources are available to the 
Incident Response Team so that the [Satellite Broadcaster] 
DRP can be updated, tested and implemented as specified. 


e Ensure that personnel are familiar with the [Satellite 
Broadcaster] DRP. 


e Ensure that there are reciprocal agreements with local 
broadcasters, cable operators and other DBS providers. 


Staff. 


e Be familiar with the DRP, and help ensure it is implemented as 
specified. 


e Perform initial damage assessment as outlined in the DRP ina 
safe and secure manner. 


e Assist in response and recovery efforts. 


e Report any potential or actual emergency situation to the 
Incident Response Team and Management. 


e Seek medical attention for any health problems caused by the 
emergency situation. 


e Identify equipment and personnel needs and report those needs 
to the Incident Response Team and Management. 


e Install or oversee the installation of new or replacement 
hardware and software. 


e Test ог oversee the testing of new or replacement hardware and 
software to ensure proper functionality. 
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Personnel Authorized to Declare an Emergency 


It is the responsibility of each employee to address emergency 
situations in accordance with the DRP in the event that they are aware of 
a situation that could result in a disruption in [Satellite Broadcaster] 
operations and delivery of essential services. An emergency event may 
not require that the entire DRP be implemented. Each event should be 
evaluated on its impact and severity by the Incident Response Team and 
Management. 


Initial Assessment 

These general guidelines should be followed by the individual(s) 
discovering or responding to the emergency situation. If possible and time 
permits, the following assessment process should occur: 

e Assess the situation. 

e |f applicable, inform co-workers and customers of the situation. 

e |f necessary, evacuate the facility. Protect vital records and 

perform emergency response; i.e., contain fire, power down 


operations equipment, etc. 


e When applicable, place calls to obtain the appropriate 
assistance from local authorities, i.e., 911, etc. 


e Document who has been called and their response. 

e Notify the applicable Incident Response Team member. Be 
prepared to provide the following information when applicable, 
to the personnel that are contacted: 

e Nature of the emergency, and time of the occurrence. 


e Extent of damage to facilities and/or plant. 


e Current status of the emergency situation including what is 
being done to confine or rectify problem. 
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e Resources which may be needed from a Corporate, Division, 
or Regional offices. 


e Members of the Incident Response Team who have been 
contacted. 


e The local authorities that have been contacted. 
e The best method to contact you. 


e The Disaster Recovery Planning Manager and applicable 
members of the Incident Response Team will convene to 
determine a solution and strategy for recovery. 


It is the responsibility of each employee to address emergency 
situations in accordance with the DRP in the event he/she is aware of a 
situation that could result in a disruption in operations and delivery 
essential services. An emergency event may not require that the entire 
plan be implemented. Each event should be evaluated on its impact and 
severity by the Incident Response Team, Disaster Recovery Planning 
Manager or Management. 


Incident Command Center 


The ICC is a location or locations identified in the planning process 
for the Incident Response Team to operate from in the event of an 
emergency. The ICC could simply be an area within the organization's 
facilities, such as a conference room or a designated external location. 
The ICC will be at the location(s) identified in Table 5. 
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Table 5: Incident command center location 


Primary Address Contact 
Locations 
Secondary Locations Address Contact 


Regardless of where it is located, the ICC should have a backup 
power source, phones, radio and television receivers, and any other 
communication systems as needed including computers for email and 
access to the internet. An example Inventory Checklist for the ICC is 
provided in Appendix C: 


As you develop plans for your facilities in the event of an 
emergency, you should ask yourself what resources will be needed 
for next 18-24 hour period? 


Evacuation Procedures 


This section is designed to assist [Satellite Broadcaster] 
personnel in the creation of an emergency response process for the 
protection of life and physical assets in the event of a fire, explosion, 
chemical spill or any emergency requiring a facility evacuation. An 
Emergency Evacuation Plan (EEP) template for customization by 
[Satellite Broadcaster] is provided in Appendix D. 


Guidelines: 


e A site Emergency Evacuation Team should be identified. The 
team should consist of an Emergency Evacuation Coordinator, 
as well as Safety Monitors as appropriate for each floor of the 
site with the appropriate number of male and female Searchers 
for each of the floors in the site. 
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The Disaster Recovery Planning Manager апа Incident 
Response Team should be identified as members of this team. 
Alternates should be assigned as appropriate. 


The Emergency Evacuation Team should be cross functional 
with representation from other departments such as Security, 
Engineering, On Air, Distribution, Production, Corporate 
Communication, Legal, Human Resources, Medical, Facilities, 
Sourcing and Finance as applicable. 


Floor plans with the evacuation routes and any relevant 
evacuation information should be posted on each floor (at 
several locations on the floor). This information should also be 
included in the EEP. 


Designate meeting sites at a location outside your site providing 
sufficient distance to ensure the safety of personnel and visitors. 


Review your operations to determine which critical operating 
systems may require continuing attention or shutdown during an 
evacuation or other emergency situation. Develop a procedure 
to ensure that requisite actions are taken during an emergency. 
Ensure that you have designated personnel to address these 
issues, provided them with the procedure and trained them in its 
use. 


Train the Emergency Evacuation Team on their responsibilities 
to implement the plan and to assist in the safe and orderly 
emergency evacuation of the facilities. 


Ensure that you have a procedure in place for communication 
and evacuation/safe refuge of disabled persons. 


Develop personnel responsibilities lists. Ensure that affected 
personnel are familiar with individual and group responsibilities. 


Determine methods and procedures for essential recovery 
personnel, including the Incident Recovery Team, Disaster 
Recovery Planning Manger, engineering, operations, and 
technical staff members to communicate their location and 
status on a predetermined basis after evacuation occurs. 
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e Develop a training program for distribution and review by 
personnel. 


e Coordinate the EEP with the [Satellite Broadcaster] DRP and 
IRM. 


e Conduct periodic practice evacuations and evaluate the 
outcome of those drills. 


e Update the plan annually. 


Key Contacts 
Incident response team: 


The Incident Response Team is a group of employees identified in 
advance during the disaster planning process. They are recruited based 
on their skills and knowledge of the various operations within the 
organizations. This team has the responsibility to ascertain the level of 
response needed during and emergency, and coordinate the recovery 
process. These individuals should also have alternates identified in the 
event the primary member is not available to perform their duties. This can 
be as simple as the General Manager and the department heads of the 
facility, with assistant department heads as the alternates. Members of the 
Incident Response Team are listed in Table 6. 


Table 6: Incident response team 


Name Title Contact Responsibilities 


Office: 
Home: 


Cell: 


24 


Employee: 

A list of active employees is available in Table 7. All personnel 
should carry a photo ID in the event federal or local authorities are 
required to secure your facility. 


Table 7: Employee contact information 


Name Title Contact Responsibilities 
Office: 
Home: 
Cell: 
Corporate: 


A list of key corporate contacts is listed in Table 8. 


Table 8: Corporate contact information 


Name Title Contact Responsibilities 


Office: 
Home: 


Cell: 
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Media: 

In the event that an emergency situation requires coordination with 
the local Radio, Newspaper, Television and other media contacts are 
listed in Table 9. 


Table 9: Media contact information 


Company Information Representative Contact 


Office: 
Home: 


Cell: 


Suppliers and vendors: 


Table 10 lists the various suppliers and vendors that may be used 
during recovery. 
Table 10: Suppliers and vendors 


Company Information Representative Contact 


Office: 
Home: 


Cell: 
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Prior to being selected, a supplier should be qualified. For 
example, in a blackout, if a supplier of diesel fuel does not have 
emergency power, they may not be able to pump fuel into their 
trucks for delivery to your facility. 


Medical and emergency: 


Table 11 lists the contact information for local police, fire and 
medical assistance. 


Table 11: Medical and emergency contacts 


Company Address Contact 
Office: 
Home: 
Cell: 

Generator: 

Company Information Representative Contact 

Office: 
Home: 
Cell: 
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Facility maintenance: 


Name Title Contact Responsibilities 

Office: 

Home: 

Cell: 

Utilities: 
Company Information Representative Contact 

Office: 
Home: 


Cell: 


Communications 


Effective communications can be a challenge during the extreme 
Whatever 


intensity of a disaster 


circumstances, the goal of communications during and after emergencies 
will be the rapid and accurate collection and dissemination of information 
so that lives may be saved, injuries minimized, fears allayed and essential 


or emergency situation. 


services and operations recovered quickly and effectively. 
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[Satellite Broadcaster] is encouraged to develop and implement a 
communications strategy in advance that meets the needs of everyone 
affected during a disaster or emergency situation. 

Consideration should be given to the functions needed to perform in an 
emergency and the communications systems needed to support them. 


Internal: 


During and after emergencies, it will be necessary to communicate 
with [Satellite Broadcaster] personnel concerning what actions need to 
be taken and other vital information. The Disaster Recovery Planning 
Manager and Incident Response Team will be the central coordinative link 
for such communications. These employees should be equipped with two- 
way radios, satellite phones, ham radios or similar devices so that they 
may communication with each other effectively in real time during an 
emergency. 


During recovery efforts, essential recovery personnel, including the 
Incident Recovery Team, Disaster Recovery Planning Manger and other 
engineering, operations and technical staff members should communicate 
their location and status on predetermined bases. 


E-mail may also be an effective means of coordination among the 
Incident Response Team before, during and after a disaster or other 
emergency situation. [Satellite Broadcaster] should consider creating e- 
mail distribution lists so that e-mail messages are broadcast to all 
members on the lists. These messages could contain notifications about 
where to meet, task responsibilities, resources that may be needed or 
other information pertaining to the emergency. 


If phones are operative, communications to personnel at home and 
at work will be handled by attempting initially to contact personnel directly 
using the employee contact information contained in Table 7. In this 
situation a voice mail system can also be used to inform personnel of the 
status of the worksite. If this is unsuccessful or if the phones are not 
operative, communications to personnel may be made using two-way 
radios, satellite phones, ham radios, e-mail and messenger system, as 
deemed appropriate, until such time as the normal phone service 
resumes. In some cases, announcements can also be provided to the 
radio, television, and print media. 
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Personnel should be informed in advance when ever this type of resource 
will be utilized and directed to the one that will be used to provide 
information about [Satellite Broadcaster]. 


Effective planning should take into account that emergency 
personnel will need to know whether their families are safe and likewise, 
families will want to know that the staff member is safe at the facility. 
However, personnel should refrain from tying up telephone lines and 
thereby impeding necessary communications. During an emergency 
involving [Satellite Broadcaster] management, they may wish to 
establish a toll-free number, web site or other means for family members 
to use to receive a status update. 


External: 


During an emergency situation, it is critical to communicate quickly, 
accurately and perhaps frequently to a variety of external audiences, such 
as the media, local authorities, municipalities, federal agencies (e.g., 
FEMA), elected officials, opinion leaders, customers and suppliers. 


During and after emergencies, these external entities may 
frequently contact [Satellite Broadcaster]. These contacts may be 
general inquiries, requests for sensitive information, requests for 
assistance, or they may be for the purpose of exchanging information of 
mutual interest. To ensure that communication is ongoing and shared with 
those entities touched by the emergency, it is essential that all such 
contacts be immediately directed to the local Public Information Officer, 
Public Affairs staff, Legal department, or other entity serving as the focal 
point for these external communications. [Satellite Broadcaster] may 
also wish to consider activating emergency information channels. The 
Federal Communications Commission encourages broadcast licensees to 
transmit emergency alerts as a public service. 


To facilitate the gathering of information which may be needed by 
external entities, a survey form template is provided in Appendix E. The 
template is not intended to be comprehensive and [Satellite 
Broadcaster] is encouraged to adapt its use to accommodate any unique 
situation which may exist. 
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Recovery Strategies 


All recovery plans should start with an assessment of the 
vulnerabilities within [Satellite Broadcaster]. It is the responsibility of the 
Disaster Recovery Planning Manger to work with [Satellite Broadcaster] 
personnel to identify specific risks, threats, incidents or situations that may 
impact ongoing system operations and to define the steps to be taken to 
prevent (Vulnerability Assessment), react (Contingency Plan) and respond 
(Recovery Plan), to these events as they occur. These plans are not 
meant to be long term restoration efforts, but rather guidelines to get back 
on the air as quickly as possible. 


After the vulnerability assessments are complete and documented, 
further planning can take place to develop strategies and solutions to 
minimize the vulnerabilities and risks identified, should they be 
encountered. It is essential that responsibility for each area of concern be 
assigned to qualified personnel. It is also essential that the plan be tested 
and practiced under realistic conditions to reveal any weaknesses which 
may not be initially apparent. 


There are nearly an infinite number of natural or man-made 
disasters or other emergency situations which could occur including bomb 
threats, earthquake, fire, flooding, gas leak, hurricanes, tornados, snow 
storms, etc. However, while there is any number of situations which could 
occur, the associated vulnerabilities and risks can generally be grouped as 
follows: 


e The loss of the use of all or critical portions of the facility. 
e Loss of the transmission facilities. 
e Loss of access to facilities. 


As such, it does not matter why the loss of use or access to a 
facility occurs. For example, access to the main facility might be lost due 
to a hazardous atmosphere, a local law enforcement action or any number 
of other emergency situations. What does matter is the availability of a 
flexible set of strategies and plans that are well thought out in advance of 
the situation. They must be practiced and tested periodically, used alone 
or in groups, to rapidly recovery from the emergency. 
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Problems that [Satellite Broadcaster] could potentially encounter 
due to an emergency situation include: 


Station On-the-Air / Off-the-Air. 
Loss of the uplink building. 
Loss of master control systems. 
Lock down - personnel cannot leave the facilities. 
Mandatory evacuations. 
Personnel cannot access the facilities or into the building(s). 
Uplink facility issues. 
Loss of telephony wired/wireless. 
Loss of data networking capabilities. 
Loss of communications capabilities to field personnel. 
Newsroom computer system failures. 
Satellite distribution system failures. 
Lawlessness. 


Below are just two examples of the many guidelines and 
procedures you will need for proper planning in the event of these types of 
problems. [Satellite Broadcaster] is encouraged to define additional 
guidelines and procedures to accommodate additional, as well as any 
locally unique, emergency situations using similar forms in this section. 
Planning for different geographic locations is also required. Planning for 
earthquakes in Southern California is a requirement, but planning for snow 


storms is not. 


Example: Loss of Power at the Uplink Center 


Recovery Preparation Responsibility Procedures 
Strategy Considerations 
Start the Proper [Outline each Any special 
emergency maintenance on | area of procedures 
generator and | the generator. responsibility needed for the 
transfer the Proper testing of | and have recovery. 
building load to | the generator. qualified staff to 


it. 


Sufficient fuel. 
Source of fuel 
during extended 
operation. 


accomplish the 
tasks necessary] 
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Example: Evacuation of Customer Service Center 


Recovery Preparation Responsibility Procedures 
Strategy Considerations 
Switch to Design a system | [Outline each Staff 
backup to enable remote | area of communications 
Customer connection of responsibility and evacuation 
Service Center; | Customer Service | and have plan, a place for 
Center. qualified staff to | the staff to meet 


Test remote 
control of 
program source 
switching under 
realistic 
conditions. 


accomplish the 
tasks necessary] 


external to the 
facility 
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Appendix A: Incident Response Manual 


The objective of the Incident Response Team manual is to ensure 
that critical contact information necessary to ensure the timely resumption 
of service is available quickly to the Incident Response Team in the event 
of an emergency. The contents of this manual are included in the 
[Satellite Broadcaster] DRP in various locations and sections are 
duplicated here. lt is intended that the Incident Response Manual be 
carried by team members at all times. Questions and/or suggestions 
concerning this manual should be directed to the Disaster Recovery 
Planning Manager. 


The following information is currently included in this Manual: 


Incident Response Team contact information. 

ICC location and backup location. 

Contact information for selected personnel. 

Contact information for selected suppliers and vendors. Contact 
information for local police, fire and medical assistance. 


Table 1: Incident response team 


Name Title Contact Responsibilities 


Office: 
Home: 


Cell: 
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Incident Command Center 


Table 2: Incident command center location 


Primary Address Contact 
Locations 
Secondary Locations Address Contact 


Employee Contact Information 


Table 3: Employee contact information 


Name 


Title 


Contact 


Responsibilities 


Office: 
Home: 


Cell: 
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Selected Suppliers and Vendors. 


Table 4: Selected suppliers and vendors 


Company Information 


Representative 


Contact 


Office: 
Home: 


Cell: 


Medical and Emergency. 


Table 5: Medical and emergency contacts 


Company 


Address 


Contact 


Office: 
Home: 


Cell: 
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Appendix B: DBS System Vulnerability Assessment Checklist 


The following vulnerability assessment checklist is provided as a 
tool for use by DBS operators to help facilitate the assessment of 
vulnerabilities which potentially may exist in their broadcast system. This 
checklist is not intended to be comprehensive, and DBS operators are 
encouraged to adapt its use to accommodate any unique requirements 
which may exist in their respective system. 


Local Receive Facilities 


Backup Is there a backup Local Receive 
Transmission | Facility (“LRF”)? LI Yes | LI No 
Facilities 
Backup Does the primary LRF have backup 
Power power? LI Yes | LI No 
Is the backup power automatically 
activated? LI Yes | LI No 


Can the backup power run long 
enough to implement the recovery | H Yes | ЦІ No 
plan? 


Are the LRF backup power capabilities 
routinely tested under load? Ц Yes | LI No 


At least once a year is the backup 
power tested while the facility is | H Yes | O No 
disconnected from the power grid? 


Security Are the security protocols sufficient to 
prevent unauthorized access to your | Ш Yes | LI No 
LRF facilities? 


Emergency Does the capability exist to obtain 
News 8. | news and information, from а! ШО Yes| LI No 
Information broadcaster’s backup studio or remote 
location (е.9., ENG/SNG trucks or 
satellite links)? 


Are there reciprocal agreements with 
other satellite operators, broadcasters | H Yes | LI No 
or cable operators, to maintain local 
emergency information availability to 
the uplink? 
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Uplink and Downlink Facilities 


Backup 


Transmission 


Facilities 


Are there backup transmission feeds to 
allow the uplink to receive LRF signals 
in the event the primary feeds are 
inoperable? 


O Yes 


No 


Are the backup transmission feeds 
tested periodically? 


O Yes 


No 


Is there a backup plan for satellite 
telemetry and control? 


O Yes 


O 


No 


Are there reciprocal agreements with 
other satellite operators, broadcasters 
or cable operators, to maintain local 
emergency information availability to 
the uplink? 


[| Yes 


No 


Backup 
Power 


Is there backup power at the uplink? 


[| Yes 


No 


Is the backup power automatically 
triggered? 


[| Yes 


No 


Can the backup power operate for the 
length of time necessary for 
implementing the recovery plan? 


O Yes 


No 


At least once a year is the backup 
power tested while the facility is 
disconnected from the power grid? 


O Yes 


No 


Security 


Is the physical security at the uplink 
sufficient to prevent unauthorized 
access? 


O Yes 


No 


Emergency 
News 
Information 


& 


Can the backup facility also receive 
LRF news and information signals to 
support a local emergency situation? 


O Yes 


No 


Does the backup facility automatically 
come online in the event of an 
emergency at the primary facility? 


[| Yes 


No 
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Customer Support Facilities 


Backup 
Power 


Is there backup power at your Customer 
Support Facility (“CSF”)? 


O Yes 


No 


Is the backup power automatically 
triggered? 


[| Yes 


No 


Can the backup power operate for the 
length of time necessary for 
implementing the Disaster Recovery 
Plan? 


[| Yes 


No 


At least once a year is the backup 
power tested while the facility is 
disconnected from the power grid? 


O Yes 


No 


Security 


Is the physical security at the CSF 
sufficient to prevent unauthorized 
access? 


O Yes 


No 


Emergency 
News & 
Information 


Is there a CSF capable of delivering at 
least basic services at а separate 
location other than the primary facility in 
the case of a catastrophic loss? 


L] Yes 


No 


Does the customer support system 
automatically divert calls in the event of 
an emergency at the primary facility? 


L] Yes 


No 


Is there a backup plan to communicate 
with the customer support centers in the 
event of an emergency? 


O Yes 


No 


Is there a communications plan to 
inform all Customer Service 
Representatives (“CSR”) of local, 
regional ог national emergency 
information and һом to properly 
communicate it to customers? 


L] Yes 


No 
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Appendix C: Incident Command Center Inventory Template 


Category 


Item 


Quantity 


Location 


Food 


Cook stove/fuel 


Paper towels 


Aluminum foil 


Plastic wrap 


Paper plates 


Forks/spoons/knives 


Cooler 


Water 


Drinking 


Washing 


Lighting 


Flashlights 


Batteries 


Radio/TV 


Radios (battery) 


Batteries 


TV (battery) 


Batteries 


Facilities 


Beds 


Bedding 


Towels 


Personal hygiene 


First aid kit 


Data Network 


PC 


Laptop 


Wireless router 


Ethernet switch 


Broadband access 


Dial-up modem 


Dial-up access 


Voice Network 


Cellular phones 


Analog/fax lines 
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Category 


Item 


Quantity 


Location 


Documentation 


DRP/IRM 


2 copies 


Facility 


2 copies 


Network 


Tools 


Basic hand tools 


Hardhat 


Coveralls 


Duct tape 


Shop vacuum 
(wet/dry) 


Broom 


Dust pan 


Gloves 


Rubber boots 


Safety glasses 


Fire Extinguisher 


Sheet plastic 


Office Supplies 


White board 


Dry erase markers 


Paper pads 


Pens/pencils 
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Appendix D: Emergency Evacuation Plan Template 


Department Name: 

Site Name: 

Site Address: 

Emergency Evacuation Coordinator: 


Emergency Evacuation Coordinator Contact Information: 


Designated Meeting Site(s) for This Facility are: 


Plan Prepared By: 
Date: 

Emergency Contact Information 
Fire: 


Medical: 
Police: 


Incident Command Center: 
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Section 1: Purpose and Objectives 


Potential emergencies at [Satellite Broadcaster] such as fire, 
explosion, hazardous material spill, chemical releases and all other 
emergency situations may require personnel to evacuate a facility. An 
EEP and adequate occupant familiarity with a facility minimize threats to 
life and property. This plan applies to all emergencies where personnel 
may need to evacuate for personal safety. 


This EEP is intended to communicate the policies and procedures 
for personnel to follow in an emergency situation. This written plan should 
be made available, upon request, to personnel and their designated 
representatives by the Emergency Evacuation Coordinator for the facility. 


Under this plan, personnel will be informed of: 

e The plan's purpose. 

e Preferred means of reporting fires and other emergencies. 
e Emergency escape procedures and route assignments. 


e Procedures to be followed by personnel who remain to control 
critical plant operations before they evacuate. 


e Procedures to account for all personnel after an emergency 
evacuation has been completed. 


e Rescue and medical duties for those staff members who 
perform them. 


e The alarm system. 


[Nameftitle] is the Emergency Evacuation Coordinator for this 
facility and has overall responsibility for the preparation and 
implementation of this plan. 


[Namef/title] is the Alternate Emergency Evacuation Coordinator. 


The Emergency Evacuation Coordinator, in coordination with the 
Disaster Recovery Planning Manager, will review and update the plan as 
necessary. Copies of this plan will be maintained in/at: [location] 
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Section Il: General Guidelines 


The following guidelines apply to this EEP: 


All personnel should be trained in safe evacuation procedures. 
Refresher training is required whenever the employee's 
responsibilities or designated actions under the plan change, 
and whenever the plan itself is changed. 


The training may include use of floor plans and workplace maps 
which clearly show the emergency escape routes included in 
the EEP. Color-coding aids personnel in determining their route 
assignments. Floor plans and maps should be posted at all 
times in main areas (і.е., stairwells, lobbies, elevator lobbies, 
exit corridors) of [Satellite Broadcaster] to provide guidance in 
an emergency. 


Stairwells are the primary means for evacuation. Elevators are 
to be used only when authorized by a fire or police officer. 


Personnel will not be permitted to re-enter the facility until 
advised by the Fire Department. 


This EEP will be coordinated with efforts in connected facilities. 
Mutually beneficial agreements can be reached regarding Designated 
Meeting Sites and shelter in the event of inclement weather. 


Section Ill: Responsibilities of Emergency Evacuation Coordinator 
and Safety Monitors 


The Emergency Evacuation Coordinator is responsible for: 


Obtaining and posting floor plans and route evacuation maps. 


Overseeing the development, communication, implementation 
and maintenance of the overall EEP. 


Ensuring the training of occupants, Safety Monitors, and critical 
operations personnel, and notifying all personnel of changes to 
the plan. 


Maintaining up to date lists of building occupants, critical 
operations personnel, and any other personnel with assigned 
duties under this plan. 


46 


In the event of a fire or other emergency, relaying applicable 
information to the Disaster Recovery Planning Manager, 
building occupants and Safety Monitors. 


Establishing Designated Meeting Sites for evacuees. 


In coordination with the Disaster Recovery Planning Manager, 
assist in posting the EEP in work areas, communicating plan to 
building occupants, and updating the plan annually. 


The Safety Monitors are responsible for: 


Assisting in familiarizing personnel with emergency evacuation 
procedures. 


Acting as liaison between management, the Disaster Recovery 
Planning Manager, and the Incident Response Team, and their 
work area. 


Ensuring that building occupants have vacated the premise in 
the event of an evacuation and for checking assigned areas. 


Knowing where their Designated Meeting Site is and for 
communicating this information to building occupants. 


Having a list of personnel in their area of coverage to facilitate a 
head count at their Designated Meeting Site. 


Ensuring that disabled persons and visitors are assisted in 
evacuating the facility. 


Evaluating апа reporting problems to the Emergency 
Evacuation Coordinator after an emergency event. 


Section IV: Alerting Occupants in Case of Fire or Other Emergency 


In case of a fire, personnel should activate the nearest fire alarm 
box and/or contact the local fire department. Fire alarm box 
locations are noted on the evacuation floor plans in Section XII. 
The alarm will serve as an alert to building occupants for the 
need to evacuate. 
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It may be necessary to activate additional fire alarm boxes or 
shout the alarm if people are still in the facility and the alarm has 
stopped sounding or if the alarm does not sound. This can be 
done while exiting. 


Persons discovering a fire, smoky condition, or explosion should 
pull the fire alarm box. Any pertinent fire or rescue information 
should be conveyed to the Fire Department. All emergency 
telephone numbers are listed at the beginning of this EEP. 


State your name, your location and the nature of the call. Speak 
slowly and clearly. Wait for the dispatcher to hang up first. On 
occasion the dispatcher may need additional information or may 
provide you with additional instructions. 


Section V: Evacuation Procedures for Facility Occupants 


When the fire alarm sounds, all personnel should ensure that 
nearby personnel are aware of the emergency, quickly 
shutdown operating equipment (e.g., compressed gas 
cylinders), close doors and exit the facility using stairwells. 


All occupants should proceed to their Designated Meeting Site 
and await further instructions from their Safety Monitor, 
Emergency Evacuation Coordinator, Disaster Recovery 
Planning Manager, or Incident Response Team member. 


All personnel should know where primary and alternate exits are 
located and be familiar with the various available evacuation 
routes. Floor plans with escape routes, alternate escape routes, 
exit locations and Designated Meeting Sites are located in 
Section ХІІ and are posted in the facility. 


Occupants should NOT use elevators as an escape route in the 
event of a fire. 


Notes and Precautions: 


Small fires can be extinguished more effectively if you are 
trained to use a fire extinguisher. However, an immediate 
readiness to evacuate is essential. 
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e All fires, even those that have been extinguished, should be 
reported to the local fire department immediately. 


e Never enter a room that is smoke filled. 
e Never enter a room if the door is warm to touch. 


e R - Rescue: When you discover a fire, rescue people in 
immediate danger if you can do so without endangering 
yourself. Exit via a safe fire exit. Never use elevators. Close 
doors to rooms with fire. 


e А - Alarm: Sound the alarm by pulling a fire box and call 911 
from a safe distance to notify fire command center of precise 
location of fire. 


e C-Confine: Close all doors, windows and other openings. 


e E- Evacuate: Evacuate the facility. 


Section VI: Disabled Occupants 


If a disabled occupant is unable to exit the facility unassisted, the 
Safety Monitor should notify the emergency response personnel of the 
individual’s location. Transporting of disabled individuals up or down 
stairwells should be avoided until emergency response personnel have 
arrived. Unless imminent life-threatening conditions exist in the immediate 
area occupied by a non-ambulatory or disabled person, relocation of the 
individual should be limited to a safe area on the same floor, in close 
proximity to an evacuation stairwell. 


Section VII: On-Air Operations 

Critical operations, including equipment that should be shut off or 
set-up to operate unattended, and persons designated to complete these 
actions are identified in Table 1. Procedures for these transition activities 
should be predetermined for life safety and loss control purposes, as well 
as ensuring complete evacuations in a timely manner. 
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Table 1: Critical Operations 


Operation Required Name Contact 
Transition 
Office: 
Home: 
Cell: 


The shutdown procedure to be followed by those employees who 
have been assigned to care for essential [Satellite Broadcaster] 
operations include: On-air; Uplink Operations; News Gathering; Sales and 
Human Resources. 


Individuals involved in these transition procedures should be 
notified by management of this responsibility in advance. They should be 
identified in the EEP, and appropriately trained for the particular situation. 
Of course alternate personnel should to be identified as well. 


Section VIII: Accountability Procedures for Emergency Evacuation 


Groups working together on or in the same area should meet 
outside and away from the facility in the prearranged Designated Meeting 
Site. A list of the primary and alternate Designated Meeting Sites is listed 
on the floor plans in Section X. 


A roster of personnel to ensure that everyone has evacuated has 
been developed by the Emergency Evacuations Coordinator. The list will 
be updated whenever there is a personnel change. 


Safety Monitors are designated by the Emergency Coordinator 
and/or the Disaster Recovery Planning Manager and will conduct head 
counts once evacuation has been completed. There should be at least 
one Safety Monitor per floor or per twenty occupants to provide adequate 
guidance and instruction at the time of an emergency. 
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Personnel selected as Safety Monitors are to be trained in the 
complete workplace layout and the various primary and alternate escape 
routes from the workplace. All trained personnel are made aware of 
employees with disabilities who may need extra assistance and of 
hazardous areas to be avoided during emergencies. Before leaving, the 
Safety Monitors are to check rooms and other enclosed spaces in the 
workplace for other staff members who may be trapped or otherwise 
unable to evacuate the area, and convey this information to emergency 
personnel. A list of Safety Monitors and Alternate Safety Monitors for 
[Satellite Broadcaster] appears in Table 2. 


Table 2: EEP Contact Information 


Responsibility Name Location Contact 


Emergency Office: 
Evacuation 


Coordinator Home: 


Cell: 


Alternate 
Emergency 
Evacuation 
Coordinator 


Safety Monitor 


Alternate Safety 
Monitor 


Once each evacuated group of employees has reached their 
Designated Meeting Site, each Safety Monitor will: 


e Assemble his/her group in the Designated Meeting Site. 

e Take head count of his or her group. 

e Assume the role of department contact to answer questions. 
e Instruct personnel to remain in area until further notice. 


e Report status to Emergency Evacuation Coordinator, Disaster 
Recovery Planning Manager or Management. 
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e Instruct personnel to remain at Designated Meeting Site until 
further notice. 


Section IX: Training and Communications 


Each occupant should know that evacuation is necessary and what 
his/her role is in carrying out the plan. Personnel should also know what is 
expected of them during an emergency to assure their safety. 


A method of training occupants in the requirements of the EEP is to 
give all personnel a thorough briefing and demonstration. The department 
should have all managers and supervisors present this plan to personnel 
in staff meetings. Annual practice drills are to be implemented and 
documented by the Emergency Evacuation Coordinator and/or Disaster 
Recovery Planning Manager. 


Training attendance records should be maintained by the 
Emergency Evacuation Coordinator and/or Disaster Recovery Planning 
Manager. 


Section ХІІ: Site Specific Information 


In this Section, the Emergency Evacuation Coordinator, in 
coordination with the Disaster Recovery Planning Manager, is to insert the 
following site specific information: 


e Facility Floor Plan. 

e Primary and Secondary Emergency Evacuation Routes. 
e Designated Meeting Sites. 

e Exits. 


e Fire Alarm Box Locations. 
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Appendix E: Survey Form Template 


Broadcast Service Name: 
Affected Facility Location: 
Services Affected: 

Facility General Manager: 


Local Contact Person: 

Title: 

Phone Number: Cell: 
Email: 


Headquarters Contact Person: 

Title: 

Phone Number: Cell: 
Email: 


Facility Address: 

Facility backup generator: 

Fuel type and capacity: 

Will operate how long? __ hours _ Days 
Backup facilities: 

Backup location: 


Date of incident: 

Date operations resumed with generator power: 
Date operations resumed with commercial power: 
Date partial services restored: 

Date full services restored: 
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